
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.mft
File: f8JFjIbiXJNFoIUssn6xcnf7gaM.mft (raw, json)
Hash identifier: Cv2Q0eGvYBO3edV/4Cxtuq7YdoAg2sei2uWIUdmfT8Q=
Subject key identifier: 35:BE:DA:C5:13:6B:78:3F:64:BA:69:A1:18:9E:68:F4:CE:61:F0:5A
Authority key identifier: 7F:C2:45:8C:86:E2:5C:93:45:A0:85:2C:B2:7E:B1:72:77:FB:81:A3
Certificate issuer: /CN=A9191DE0/serialNumber=7FC2458C86E25C9345A0852CB27EB17277FB81A3
Certificate serial: 0A84
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8JFjIbiXJNFoIUssn6xcnf7gaM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.mft
Manifest number: 0A7A
Signing time: Tue 22 Sep 2026 19:26:19 +0000
Manifest this update: Tue 22 Sep 2026 19:26:19 +0000
Manifest next update: Tue 29 Sep 2026 19:26:19 +0000
Files and hashes: 1: f8JFjIbiXJNFoIUssn6xcnf7gaM.crl (hash: q2dy9R5yeORFWqWtumerH8bedr0NEvEpoiOc7XOy/vk=)
2: F898AEBC8F6411EA96126E5DC4F9AE02.roa (hash: CgnP+/rSHkkonAvFRbYmCY32JDnrx7tAgsh6bxIXNeo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.crl
rsync://rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8JFjIbiXJNFoIUssn6xcnf7gaM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 19:26:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2692 (0xa84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9191DE0, serialNumber=7FC2458C86E25C9345A0852CB27EB17277FB81A3
Validity
Not Before: Sep 22 19:26:19 2026 GMT
Not After : Sep 29 19:26:19 2026 GMT
Subject: CN=6ab2d65b-bdaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:08:32:31:d8:f3:e9:41:34:9b:79:9c:75:4e:
36:ff:72:d5:d0:13:40:a3:b0:a8:d9:90:c7:dd:c8:
8a:9a:3d:83:72:82:48:49:78:05:c7:9b:5c:8a:1c:
22:c0:b3:10:30:b1:8e:a5:28:a0:cd:81:f2:2e:40:
03:70:68:cc:89:79:43:13:72:c6:a5:1e:36:d6:38:
b4:b5:01:fc:e7:89:97:b9:13:ff:32:85:66:70:00:
d0:2f:a8:a2:3e:2f:65:dc:ed:d9:7e:03:d6:68:6b:
34:8b:ba:bb:42:cc:41:05:30:3e:d1:f8:a4:80:e5:
c0:45:28:00:0c:d7:24:a9:7a:fd:86:53:71:96:df:
9f:43:44:37:89:d5:9b:9d:62:3b:e6:51:87:51:97:
67:10:d8:0d:58:8a:0c:6c:cb:c8:93:25:22:a1:f6:
1b:db:1b:5b:78:d9:f8:25:28:d1:2d:73:ba:a5:f8:
0c:e2:d3:4a:d7:8b:c5:5c:70:91:01:ca:2b:1f:bb:
b1:78:fa:8c:15:b4:83:3c:c6:af:39:04:b3:db:35:
57:13:5b:5d:0b:e7:76:3c:a6:1c:24:42:24:aa:6f:
8c:ff:f1:28:e8:13:e0:7d:71:75:85:a5:87:1c:3b:
41:95:f3:15:09:71:12:f9:35:cf:21:31:02:06:1e:
df:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:BE:DA:C5:13:6B:78:3F:64:BA:69:A1:18:9E:68:F4:CE:61:F0:5A
X509v3 Authority Key Identifier:
keyid:7F:C2:45:8C:86:E2:5C:93:45:A0:85:2C:B2:7E:B1:72:77:FB:81:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8JFjIbiXJNFoIUssn6xcnf7gaM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:c9:76:53:79:40:29:0f:27:4f:e9:5c:17:3e:c4:37:33:f0:
1c:52:15:95:39:4c:3c:bb:d1:64:f0:77:77:75:56:f1:cf:25:
eb:8a:75:84:59:fc:6d:c5:2a:6c:f9:bd:3c:19:49:2a:c7:fd:
7f:3b:75:d1:e7:f3:38:fb:8a:fd:8e:06:bc:66:cd:80:ee:4a:
23:b9:89:61:24:68:ae:75:96:2e:fd:1d:68:9d:b3:2a:bb:e4:
bb:53:29:85:0d:ed:93:bc:75:af:9e:b9:99:81:a7:a9:21:1d:
32:e2:28:bf:20:14:00:dd:73:14:04:01:c6:b9:df:f0:f8:b7:
e2:75:9e:e1:98:c1:61:0a:55:80:21:aa:5d:9f:dc:c7:d3:5f:
0d:dc:25:b0:94:6f:04:dc:ad:c4:c8:81:4a:19:17:5c:24:67:
10:14:7d:c9:bb:96:b3:7c:48:5c:ef:c3:00:57:8a:41:84:a1:
7e:8f:95:7b:6f:6c:1c:d1:a9:65:38:b5:bc:93:d5:51:73:ab:
62:8b:33:12:84:03:24:2d:6d:08:41:97:c1:5b:e2:1e:1e:d1:
8f:98:81:85:0c:94:41:74:c0:75:e4:64:f7:21:f3:cb:3a:5e:
b2:6c:6e:92:11:a8:6e:71:7d:a1:52:9b:9d:fc:eb:1e:c7:fb:
bd:33:cb:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:03:44 2026 by rpki-client